PRIVACY POLICY

Lisa Lisa Inc.

d/b/a Kara Marie Wines

Effective Date: August 26, 2026 | Last Updated: August 26, 2026

1. Introduction and Scope

This Privacy Policy (this “Policy”) describes how Lisa Lisa Inc., a California corporation doing business as Kara Marie Wines (the “Company”), collects, uses, discloses, and retains information obtained through the website located at karamariewines.com (the “Site”).

As used in this Policy, “Personal Information” means information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual.

This Policy applies to information the Company collects through the Site and to information you submit to the Company directly in connection with the matters described in Section 3. It does not apply to information collected through channels operated by third parties, including the checkout and wine club services described in Section 6.2 and the event registration services described in Section 3.1(e), each of which is governed by the privacy practices of the applicable third party.

By accessing or using the Site, you acknowledge that you have read and understood this Policy.

2. Age Restriction

The Site is intended solely for individuals of legal drinking age in the United States. Upon arrival, you are asked to confirm that you are twenty-one years of age or older. If you so confirm, a record of that confirmation is stored locally in your browser for thirty days so that the prompt does not repeat on subsequent visits. No date of birth is collected at this step, and the confirmation is not transmitted to the Company.

Age verification in connection with a purchase is a separate process, administered by Vinoshipper at checkout and by the delivery carrier, which requires the signature of an adult recipient.

3. Information Collected

3.1 Information you provide. The Company collects the following categories of Personal Information when you submit it through the Site:

(a) Newsletter subscription. First name, last name, and email address. The email service provider identified in Section 6.3 additionally records the date and IP address of the subscription as evidence of consent.

(b) Contact form. Your name, email address, and the contents of your message.

(c) Wine club enrollment. The contact and shipping information necessary to establish and administer your membership.

(d) Purchases. All wine and merchandise transactions are conducted through Vinoshipper. At checkout you provide your name, billing and shipping addresses, email address, telephone number, payment card details, and age verification information directly to Vinoshipper. The Company does not receive or store full payment card numbers. The Company is able to view order history, contact details, and shipping information through its Vinoshipper account.

(e) Events. Certain events are hosted in conjunction with partner venues or businesses. In those instances, registration, ticketing, and payment are administered by the partner under its own privacy practices, and the Company neither receives nor stores that information. For events hosted directly by the Company, the Company collects the contact information you provide at the time of registration, whether by email or through a registration or ticketing service it may adopt in the future.

3.2 Information collected automatically. When you visit the Site, the Company and its service providers receive your IP address, browser and device type, the pages you view, the duration of your visit, and the site or link from which you were referred. The Company uses this information in aggregate to evaluate use of the Site. It is not used to construct advertising profiles.

3.3 Information concerning other individuals. If you direct a shipment or gift to another person, you provide that person’s name, address, and contact information. You represent that you are authorized to provide such information and that the recipient is twenty-one years of age or older.

4. Cookies and Local Storage

Cookies are small files placed in your browser by a website. The following identifiers are set on the Site:

Identifier	Set By	Purpose
crumb	Squarespace	Security token protecting forms against cross-site request forgery. Strictly necessary.
ss_cvr	Squarespace	Counts unique visitors for traffic analytics.
vsCartId	Vinoshipper	Retains cart contents between pages.
NID, SEARCH_SAMESITE	Google	Set by reCAPTCHA, which screens forms for automated abuse.
rara_ok	The Site	Local storage, not a cookie. Records confirmation of legal drinking age for thirty days.

The Company does not employ advertising cookies, retargeting pixels, session recording, or cross-site behavioral tracking. You may block or delete cookies through your browser settings; blocking those identified above as strictly necessary may prevent forms and checkout from functioning.

5. Use of Information

The Company uses the information described in this Policy to fulfill and ship orders; administer the wine club; comply with alcoholic beverage licensing, tax, and reporting obligations; respond to inquiries; distribute its newsletter to subscribers; provide notice of events; protect the Site against fraud and abuse; and evaluate use of the Site.

6. Disclosure of Information

The Company discloses information to the service providers identified below. Each provider processes information on behalf of the Company or in connection with the services it furnishes, and each maintains its own privacy policy.

6.1 Squarespace. Hosts the Site, delivers the pages of the Site, stores contact form submissions, and provides visitor analytics.

6.2 Vinoshipper. Operates the online store, wine club, checkout, and payment processing, and administers state licensing, age verification, tax collection, and shipping compliance. Vinoshipper is the custodian of order and payment information and retains those records pursuant to its own legal obligations. Vinoshipper is operated by Zero Link Markets, Inc., and maintains its own privacy policy, published in its help documentation at vinoshipper.freshdesk.com.

6.3 Mailchimp. Maintains the mailing list and distributes newsletters. Mailchimp records opens and link activity within those campaigns, together with the IP address and timestamp of subscription. Subscriptions initiated at Vinoshipper checkout are transmitted to Mailchimp only upon your affirmative opt-in, and only name and email address are transmitted.

6.4 Google. Provides reCAPTCHA, which screens forms on the Site for automated abuse. Google receives your IP address and browser signals when a page containing a form is loaded. Google additionally provides the business email service used by the Company, through which contact form submissions, event registrations submitted by email, and other correspondence with the Company are transmitted and stored.

6.5 Adobe. Serves the typefaces used on the Site and receives a request from your browser, including your IP address, when a page is loaded.

6.6 Content delivery networks. Certain software libraries used by the Site, including jQuery, are delivered from third-party content delivery networks, which receive your IP address when a page is loaded.

6.7 Intuit QuickBooks. Connected to the Squarespace account maintained by the Company for accounting purposes.

6.8 Meta Platforms. The Kara Marie Wines Instagram feed may be embedded on the Site. While that embed is active, Meta receives your IP address and may set its own cookies.

6.9 Other disclosures. The Company may also disclose information where required by law or legal process; to a regulatory authority, including a state alcoholic beverage control agency; to enforce its agreements or protect its rights; or in connection with a merger, acquisition, or sale of all or substantially all of its assets.

7. No Sale of Personal Information

The Company does not sell, rent, or trade Personal Information, and does not disclose Personal Information to third parties for those parties’ own advertising or marketing purposes.

8. Do Not Track

The Site does not respond to browser Do Not Track signals, because Squarespace, the platform on which the Site operates, does not recognize them. Squarespace’s statement to that effect is available in its cookie policy at squarespace.com/cookie-policy.

9. Retention

9.1 The Company retains newsletter subscription information until you unsubscribe.

9.2 The Company retains order and wine club records for seven years in satisfaction of tax, accounting, and alcoholic beverage reporting obligations. Vinoshipper retains transaction records independently, pursuant to its own compliance requirements and retention schedule, and the Company is unable to delete records held by Vinoshipper on your behalf.

9.3 The Company retains contact form submissions for so long as necessary to respond to your inquiry and for its business records.

10. Your Rights and Choices

10.1 Unsubscribe. You may unsubscribe from the newsletter at any time using the link contained in every marketing email sent by the Company. The request takes effect immediately. Unsubscribing does not affect transactional messages concerning your orders or wine club shipments.

10.2 Access, correction, and deletion. You may request access to, correction of, or deletion of the Personal Information the Company holds about you by submitting a request to the address set forth in Section 17. The Company will respond within forty-five days of receipt, or within such other period as applicable law may require.

10.3 Requests for deletion of order records may be limited by the obligations described in Section 9.2 and by records Vinoshipper is independently required to retain.

10.4 The Company may request information sufficient to verify your identity before responding to a request made under this Section.

10.5 The Company will not discriminate against you for exercising any right described in this Section.

11. California Residents

The Company honors the requests described in Section 10 for all customers, including residents of California.

California Civil Code section 1798.83 permits residents of California to request certain information regarding disclosure of Personal Information to third parties for those parties’ direct marketing purposes. That section applies to businesses with twenty or more employees. The Company employs fewer than twenty individuals and does not disclose Personal Information for such purposes.

12. Children’s Privacy

The Site is not directed to individuals under twenty-one years of age, and specifically is not directed to children under thirteen. The Company does not knowingly collect Personal Information from children. If you believe that a child has provided Personal Information through the Site, notify the Company at the address set forth in Section 17, and the Company will delete it.

13. Third-Party Websites

The Site may contain links to websites operated by third parties, including social media platforms and partner venues. The Company does not control those websites and is not responsible for their content or privacy practices. You should review the privacy policy of any third-party website you visit.

14. United States Only

The Site is intended for residents of the United States. The Company does not ship outside the United States and does not direct its products, services, or marketing to individuals located outside the United States. Information collected through the Site is stored and processed in the United States.

15. Security

The platforms on which the Company relies maintain commercially reasonable, industry-standard security practices, and payment processing is administered by Vinoshipper rather than by the Company. No method of transmission over the internet or method of electronic storage is entirely secure, and the Company cannot guarantee absolute security.

16. Changes to This Policy

The Company may amend this Policy from time to time. The Effective Date and Last Updated date set forth above will be revised accordingly. If the Company begins to collect new categories of Personal Information, or to disclose Personal Information to additional third parties, the Company will state so expressly.

17. Contact

Questions or requests concerning this Policy may be directed to: